{"id":"CVE-2019-0131","aliases":["EUVD-2019-0938","GHSA-vpxp-73pv-cfjp"],"status":"published","title":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11...","description":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00594,"percentile":0.48657,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-12-18T21:08:32Z","modified":"2026-06-17T02:07:45Z","products":[{"vendor":"intel","product":"active_management_technology_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0131"},{"url":"https://github.com/advisories/GHSA-vpxp-73pv-cfjp"}],"sources":{"cve":[{"id":"CVE-2019-0131","description":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.","status":"published","published":"2019-12-18T21:08:32Z","modified":"2024-08-04T17:44:14.595Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-0938","description":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.","status":"published","published":"2019-12-18T21:08:32Z","modified":"2024-08-04T17:44:14Z","updated_at":"2026-11-03T03:07:02.510914Z"}],"ghsa":[{"id":"GHSA-vpxp-73pv-cfjp","title":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11...","description":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.","status":"published","published":"2022-05-24T17:03:53Z","modified":"2023-01-29T05:00:43Z","updated_at":"2026-11-02T14:44:38.905828Z"}],"nvd":[{"id":"CVE-2019-0131","description":"Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.","status":"published","published":"2019-12-18T22:15:11.533Z","modified":"2026-06-17T02:07:45.83Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.8,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:40.856496Z"}]}}